Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/2-tlpBfUImZj2aax6zbMfVqsA0s.roa
File: 2-tlpBfUImZj2aax6zbMfVqsA0s.roa (raw, json)
Hash identifier: E8z9tUHASJQGfdGjhAg73i5RqPZO7CHFDu2hqk+QmR8=
Subject key identifier: DB:EB:65:A4:17:D4:22:66:63:D9:A6:B1:EB:36:CC:7D:5A:AC:03:4B
Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial: 018CC6B79F741C65353336B081A32638C188
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/2-tlpBfUImZj2aax6zbMfVqsA0s.roa
Signing time: Mon 01 Jan 2024 20:29:31 +0000
ROA not before: Mon 01 Jan 2024 20:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31200
IP address blocks: 178.49.248.0/22 maxlen: 22
178.49.200.0/22 maxlen: 22
5.130.166.0/24 maxlen: 24
5.129.0.0/17 maxlen: 17
37.193.0.0/16 maxlen: 16
5.129.128.0/19 maxlen: 19
37.195.0.0/16 maxlen: 16
5.131.0.0/16 maxlen: 16
178.49.12.0/22 maxlen: 22
5.130.0.0/16 maxlen: 16
37.194.0.0/16 maxlen: 16
178.49.56.0/22 maxlen: 22
37.192.0.0/16 maxlen: 16
5.128.0.0/16 maxlen: 16
5.129.186.0/24 maxlen: 24
5.129.181.0/24 maxlen: 24
5.129.184.0/23 maxlen: 23
37.192.0.0/14 maxlen: 14
178.49.0.0/17 maxlen: 17
178.49.0.0/16 maxlen: 24
178.49.132.0/24 maxlen: 24
178.49.128.0/17 maxlen: 24
178.49.133.0/24 maxlen: 24
178.49.145.0/24 maxlen: 24
178.49.144.0/24 maxlen: 24
178.49.142.0/24 maxlen: 24
178.49.141.0/24 maxlen: 24
178.49.146.0/24 maxlen: 24
178.49.148.0/24 maxlen: 24
178.49.147.0/24 maxlen: 24
178.49.152.0/23 maxlen: 23
178.49.152.0/24 maxlen: 24
178.49.152.0/22 maxlen: 22
178.49.150.0/23 maxlen: 23
178.49.159.0/24 maxlen: 24
178.49.158.0/24 maxlen: 24
178.49.156.0/23 maxlen: 23
178.49.154.0/24 maxlen: 24
178.49.154.0/23 maxlen: 23
5.128.119.0/24 maxlen: 24
5.131.240.0/20 maxlen: 20
5.131.251.0/24 maxlen: 24
2a00:7700::/32 maxlen: 32
2a00:7700:8a02::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 10 Jan 2024 02:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:9f:74:1c:65:35:33:36:b0:81:a3:26:38:c1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Validity
Not Before: Jan 1 20:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbeb65a417d4226663d9a6b1eb36cc7d5aac034b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:ad:5b:be:e5:46:52:7e:c8:15:76:26:10:
0c:3f:5d:7a:5d:7e:ba:f9:ff:e3:73:43:68:fb:a5:
30:3b:58:6a:18:b2:6c:b9:d1:a9:b0:73:bc:19:c6:
c8:86:24:01:29:42:df:73:bd:e4:00:33:4a:9d:35:
94:27:8d:a2:bd:84:08:52:f0:8d:c0:92:93:fa:a9:
f3:3d:b7:78:ed:d6:90:71:61:52:f4:ff:72:7a:95:
74:df:71:82:e8:fe:36:d2:46:6d:c9:b3:7e:83:85:
9f:7c:cb:44:a7:72:f7:e7:e3:78:aa:50:36:3f:c3:
d7:98:e8:e4:8c:32:c8:cb:9f:42:b2:33:f5:01:0c:
12:0a:c8:59:f4:16:cc:3c:64:e0:11:0f:dc:a6:55:
20:15:98:4f:dd:42:c7:49:96:5a:6c:1e:23:98:cf:
27:bb:a2:07:83:f2:70:01:8c:1c:39:3a:a4:5d:53:
ff:78:2a:2e:0b:e8:8f:bf:d8:d0:70:c9:b9:15:5e:
35:f0:e2:52:4d:09:7a:9c:11:b5:41:80:a9:83:ec:
05:3e:a2:00:b0:cc:ca:93:2c:1d:55:6e:41:89:89:
87:28:30:ff:71:4d:5e:1e:82:d3:f6:c6:03:ec:72:
bc:37:ad:2d:5a:26:e1:71:71:40:20:bf:5a:c9:0e:
9b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EB:65:A4:17:D4:22:66:63:D9:A6:B1:EB:36:CC:7D:5A:AC:03:4B
X509v3 Authority Key Identifier:
keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/2-tlpBfUImZj2aax6zbMfVqsA0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.128.0.0-5.129.159.255
5.129.181.0/24
5.129.184.0-5.129.186.255
5.130.0.0/15
37.192.0.0/14
178.49.0.0/16
IPv6:
2a00:7700::/32
Signature Algorithm: sha256WithRSAEncryption
92:56:ba:f0:4d:e0:14:97:bc:1d:a2:9f:24:cd:98:93:9e:9b:
da:a6:31:4d:95:aa:bf:2b:d8:86:12:a2:ed:f6:0e:00:f4:fb:
8a:75:0e:2a:ac:6e:a6:e8:ac:98:15:c3:da:70:59:39:c5:8a:
ec:06:dc:d5:9a:f6:c8:49:95:b1:c2:6a:1c:10:21:6e:70:cd:
d6:4a:ba:0a:cf:1c:4c:fa:55:af:a2:e7:21:bd:6c:c8:d0:c3:
e9:f0:62:ba:39:f5:33:c8:8b:d9:9c:e1:10:f2:c4:e5:2b:08:
5a:6f:3a:14:a1:8f:a8:db:69:cb:94:7a:70:7a:ae:fe:3b:b6:
66:34:5a:1c:57:c6:ad:4f:ab:ec:18:b1:4c:ef:c8:ca:49:0f:
87:ec:5e:29:0c:63:a5:73:81:c2:7a:27:db:78:5f:7b:64:91:
4c:cc:13:2d:a5:47:56:63:6f:4b:b7:74:ec:05:41:21:50:b9:
ce:60:d1:b3:8b:e7:bd:6f:d9:f4:e2:3b:6e:46:e0:f7:bf:73:
58:86:29:5d:9f:43:72:55:5d:42:67:69:a5:d3:e5:30:0c:da:
1d:c6:fd:58:cd:d6:83:e9:8f:08:e2:2a:6a:1e:32:8c:53:2c:
51:48:ba:cf:fd:b8:96:ba:e9:39:e4:96:df:f1:ad:c3:3b:79:
b6:77:ea:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org